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Commissioner for Patents 
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Alexandria, VA 22313-1450 

Dear Sir: 

INTRODUCTORY COMMENTS 

In response to the Office Action dated April 13, 2007, finally rejecting claims 
1-10, please amend the above-identified U.S. patent application as follows: 



Amendments to the Claims are reflected in the listing of claims which 
begins on page 7 of this paper. 



Remarks/Arguments begin on page 8 of this paper. 



FEE CALCULATION 
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Any additional fee required has been calculated as follows: 





Claims 
Remaining After 
Amendment 


Highest Number 
Previously Paid 


Number Extra 
Claims 
Present 


Rate 


Additional 
Fee 


Total 


10 


- 20* = 




X 




Independent 


3 


- 3" = 




X 




First presentation of Multiple Dependent Claim(s) (if applicable) 




TOTAL 


0.00 



*not less than 20 ** not less than 3 



No additional fee is required. 

In the event a fee is required or if any additional fee during the 
prosecution of this application is not paid, the Patent Office is authorized to 
charge any underpayment or credit any overpayment to Deposit Account No. 
50-2215. 

CONTINGENT EXTENSION REQUEST 

If this communication is filed after the shortened statutory time period 
had elapsed and no separate Petition is enclosed, the Commissioner of Patents 
and Trademarks is petitioned, under 37 CFR 1.136(a), to extend the time for 
filing a response to the outstanding Office Action by the number of months which 
will avoid abandonment under 37 CFR 1.135. The fee under 37 CFR 1.17 
should be charged to our Deposit Account No. 50-2215. 
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AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) A LAN system for causing a base station that is 
inside a LAN to determine whether or not to authenticate a terminal station outside of 
said LAN and to permit said terminal station to access a predetermined server or 
network-connected device when said terminal station has not been authenticated, 

wherein said base station comprises: 

an interface portion for making a communication with said terminal station 
and extracting authentication request information and a reception packet therefrom; 

a first authentication managing portion for determining whether or not to 
authenticate said terminal station for said LAN corresponding to a response from an 
inner LAN authenticating server responding to said authentication request information 
received from said interface portion and setting a result of the determination to a first 
packet distributing table; and 

a first packet distributing portion for referencing registered contents of said 
first packet distributing table for the packet received from said interface portion, 
transferring the packet received from said interface portion to said LAN when said 
contents of said first packet distributing table represent that said terminal station has 
been authenticated for said LAN, and transmitting the packet received from said 
interface portion to said predetermined server or network-connected device when said 
contents of said first packet distributing table represent that said terminal station has not 
been authenticated for said LAN , wh e r ei n th e bas e stat i on do e s not broadcast th e 
authonticat i on roquost informat i on . 

2. (Previously Presented) The LAN system as set forth in claim 1 , 
wherein said base station further comprises: 

a second authentication managing portion; 
a second packet distributing portion; and 

a second packet distributing table for storing a plurality of destinations, 
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wherein said second authentication managing portion is configured for 
determining whether or not to authenticate said terminal station corresponding to said 
authentication request information and setting a result of a concerned determination to 
said second packet distributing portion when the result of the determination of said first 
authentication managing portion represents that said terminal station has not been 
authenticated for said LAN, 

wherein said first packet distributing portion is configured for transferring 
the packet received from said terminal station to said second packet distributing portion 
when said registered contents of said first packet distributing table represent that said 
terminal station has not been authenticated for said LAN, and 

wherein said second packet distributing portion is configured for 
referencing the registered contents of said second packet distributing table for the 
packet received from said first packet distributing portion and transmitting the packet 
received from said terminal station to an appropriate server or network-connected 
device corresponding to a destination to which the packet is distributed. 

3. (Original) The LAN system as set forth in claim 1 , 

wherein said first authentication managing portion is configured for issuing 
an authentication request to an inner LAN authenticating server and setting a response 
to the authentication request to said first packet distributing table. 

4. (Original) The LAN system as set forth in claim 2, 

wherein said second authentication managing portion is configured for 
issuing an authentication request to an inner LAN authenticating server and setting a 
response to the authentication request to said second packet distributing table. 

5. (Currently Amended) A LAN base station for determining whether or 
not to authenticate a terminal station outside of a LAN and permitting said terminal 
station to access a predetermined server or network-connected device when said 
terminal station has not been authenticated, said LAN base station comprising: 
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an interface portion for making a communication with said terminal station 
and extracting authentication request information and a reception packet therefrom; 

a first authentication managing portion for determining whether or not to 
authenticate said terminal station for said LAN corresponding to a response from an 
inner LAN authenticating server responding said authentication request information 
received from said interface portion and setting a result of the determination to a first 
packet distributing table; and 

a first packet distributing portion for referencing registered contents of said 
first packet distributing table for the packet received from said interface portion, 
transferring the packet received from said interface portion to said LAN when the 
contents of said first packet distributing table represent that said terminal station has 
been authenticated for said LAN, and transmitting the packet received from said 
terminal station to said predetermined server or network-connected device when the 
registered contents of said first packetdistributing table represent that said terminal 
station has not been authenticated for said LAN , whoro i n the bas e stat i on do e s not 
broadcast tho authonticat i on roquost i nformat i on . 

6. (Previously Presented) The LAN base station as set forth in claim 5, 
further comprising: 

a second authentication managing portion; 
a second packet distributing portion; and 

a second packet distributing table for storing a plurality of destinations, 
wherein said second authentication managing portion is configured for 
determining whether or not to authenticate said terminal station corresponding to said 
authentication request information and setting a result of a concerned determination to 
said second packet distributing portion when the result of the determination of said first 
authentication managing portion represents that said terminal station has not been 
authenticated for said LAN, 
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wherein said first packet distributing portion is configured for transferring 
the packet received from said terminal station to said second packet distributing portion 
when said registered contents of said first packet distributing table represent that said 
terminal station has not been authenticated for said LAN, and 

wherein said second packet distributing portion is configured for 
referencing the registered contents of said second packet distributing table for the 
packet received from said first packet distributing portion and transmitting the packet 
received from said terminal station to an appropriate server or network-connected 
device corresponding to a destination to which the packet is distributed. 

7. (Original) The LAN base station as set forth in claim 5, 

wherein said second authentication managing portion is configured for 
issuing an authentication request to an inner LAN authenticating server and setting 
response to the authentication request to said first packet distributing table. 

8. (Original) The LAN base station as set forth in claim 6, 

wherein said second authentication managing portion is configured for 
issuing an authentication request to an inner LAN authenticating server and setting 
response to the authentication request to said second packet distributing table. 

9. (Currently Amended) A method for distributing a packet from a 
terminal station that accesses a LAN base station from the outside of a LAN, said 
method comprising the steps of: 

determining whether or not to authenticate said terminal station for said 
LAN corresponding to a response from an inner LAN authenticating server responding 
to an authentication request issued from said terminal station; 

registering an authentication permission with a first packet distributing 
table when a result of the determination represents that said terminal station has been 
authenticated; 
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registering an authentication refusal with said first packet distributing table 
when the result of the determination represents that said terminal station has not been 
authenticated; 

sending an authentication permission response to said terminal station 
after registering said authentication permission or said authentication refusal with said 
first packet distributing table; 

receiving a packet from said terminal station and determining which of 
said authentication permission and said authentication refusal is registered with said 
first packet distributing table for said terminal station; 

transmitting the packet to said LAN when said authentication permission is 
registered with said first packet distributing table for said terminal; and 

transmitting the packet to a server or network-connected device when said 
authentication refusal is registered with said first packet distributing table for said 
terminal , wherein the bas e station do e s not broadcast th e auth e ntication r e qu e st 
informat i on . 

1 0. (Original) The packet distributing method as set forth in claim 9, 
wherein said base station has a second packet distributing table for 
storing a plurality of destinations to which packets are distributed, and 
wherein said method further comprises the step of: 
referencing the registered contents of said second packet distributing table 
for the packet received from said terminal station and transmitting the packet received 
from said terminal station to an appropriate server or network-connected device 
corresponding to a destination corresponding to the registered contents of said second 
packet distributing table when said authentication refusal is registered with said first 
packet distributing table for said terminal. 
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REMARKS 

Claims 1-10 are pending in this application. Claims 1-10 stand rejected. By 
this Amendment, claims 1 , 5, and 9 have been amended. The amendments made to 
the claims do not alter the scope of these claims, nor have these amendments been 
made to define over the prior art. Rather, the amendments to the claims have been 
made to improve the form thereof. In light of the amendments and remarks set forth 
below, Applicant respectfully submits that each of the pending claims is in immediate 
condition for allowance. 

Claims 1-10 stand rejected under 35 U.S.C. § 112, first paragraph, as failing 
to comply with the written description requirement. Applicant has amended claim 1 and 
respectfully requests withdrawal of the rejection. 

Claims 1, 2, 5, and 6 stand rejected under 35 U.S.C. § 102(b) as being 
anticipated by U.S. Patent No. 5,819,178 ("Cropper"); claims 1, 3, 5, and 7 stand 
rejected under 35 U.S.C. § 103(a) as being unpatentable over U.S. Patent No. 
6,873,609 ("Jones") in view of a software architecture for next generation routers 
("DeCasper"). Applicant respectfully traverses this rejection. 

As set forth in claims 1, 2, 5, and 6, the authentication request information is 
sent to an inner LAN authenticating server. The base station determines whether or not 
to authenticate the terminal station for the LAN corresponding to a response from the 
inner LAN authenticating server. Further, as set forth in claims 1 , 3, 5 and 7, if a 
terminal is inhibited from being connected with the LAN, the terminal is connected with a 
predetermined server or network-connected device 

In contrast, in Cropper, the authentication request is broadcast in accordance 
with a standard of roaming. As such, claims 1,2,5, and 6 are patentable over Cropper. 
Further, as explicitly recited in the claims, if the terminal is prevented from being 
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connected to the LAN, the terminal is connected with a predetermined server or network 
connected device. 

As set forth in Jones, if the terminal is permitted to be connected to a network, 
than the terminal is connected with the entire network. There is no disclosure of the 
explicitly recited limitations of the claims discussed above. Therefore, Applicant 
respectfully submits that claims 1-10 are allowable over the cited art. 

Claims 2-4 depend either directly or indirectly from, and contain all the 
limitations of claim 1 . These dependent claims also recite additional limitations which, 
in combination with the limitations of claim 1 , are neither disclosed nor suggested by the 
cited references and are also believed to be directed towards the patentable subject 
matter. Thus, claims 2-4 should also be allowed. 

Claims 6-8 depend either directly or indirectly from, and contain all the 
limitations of claim 5. These dependent claims also recite additional limitations which, 
in combination with the limitations of claim 5, are neither disclosed nor suggested by the 
cited references and are also believed to be directed towards the patentable subject 
matter. Thus, claims 6-8 should also be allowed. 

Claim 10 depends from, and contains all the limitations of claim 9. This 
dependent claim also recites additional limitations which, in combination with the 
limitations of claim 9, are neither disclosed nor suggested by the cited references and 
are also believed to be directed towards the patentable subject matter. Thus, claim 10 
should also be allowed. 

Applicant has responded to all of the rejections and objections recited in the 
Office Action. Reconsideration and a Notice of Allowance for all of the pending claims 
are therefore respectfully requested. 
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In view of the above, each of the presently pending claims in this application 
is believed to be in immediate condition for allowance. Accordingly, the Examiner is 
respectfully requested to withdraw the outstanding rejection of the claims and to pass 
this application to issue. 

If the Examiner believes an interview would be of assistance, the Examiner is 
welcome to contact the undersigned at the number listed below, 

Dated: July 3, 2007 




Ian R/ Blum 
Reg 



Registration No.: 42,336 
DICKSTEIN SHAPIRO LLP 
1 1 77 Avenue of the Americas 
New York, New York 10036-2714 
(212)277-6500 
Attorney for Applicant 

IRB/mgs 
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